Should I block it?
Yes, 98% block recommendation.
Possible reasons:
Multiple malware detections
Performance resource utilization
Relationships
Parent process
Related files
UninstallHelper.exe
Uninstall Helper by W3i (Signed)
| Version: | 2.0.0.0 |
| MD5: | 326273a861fe622090eda923edbdea4b |
| SHA1: | 25b83e1b69ca8cafce103a9833f567672c164573 |
| SHA256: | a146d964881318ee494b8a087259983828f5594b5fe6581ed0aee8c30f6be389 |
Warning 3 antivirus scanners has detected malware.
What is UninstallHelper.exe?
Uninstall Helper is part of the software bundler installer by W3i.
About UninstallHelper.exe (from W3i)
“W3i, is a network of application companies, that support each other. Publishers increase revenue by offering relevant applications during their installation process. Advertisers increase distributio”
Details
| File name: | uninstallhelper.exe |
| Publisher: | W3i, LLC |
| Product name: | Uninstall Helper |
| Typical file path: | C:\Program Files\w3i\uninstallhelper\uninstallhelper.exe |
| File version: | 2.0.0.0 |
| Size: | 877.15 KB (898,200 bytes) |
| Certificate |
| Issued to: | W3i |
| Authority (CA): | VeriSign |
| Effective date: | Saturday, June 18, 2011 |
| Expiration date: | Monday, July 1, 2013 |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Programs
The following program will install this file
Uninstall Helper is part of the W3i InstallIQ bundleware application designed to monitor and keep W3i installed applications up to date. Uninstall Helper is included as an option with all W3i InstallIQ installations. Uninstall Helper the software updater program which runs in the background of Windows and automatically starts up when your PC boots. It checks for software updates and automatically downloads and installs them if found.
Behaviors
Startup files (user) run
Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'UninstallHelper' → "C:\Program Files\W3i\UninstallHelper\UninstallHelper.exe" /silent /autorun
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
- Firewall exception for 'C:\Program Files\W3i\UninstallHelper\UninstallHelper.exe'
Network connections
Access through an approved Windows firewall exception
[UDP] listens on port 49157
Malware detections
Based on 40+ industry antivirus scanners, 3 of them detected the following malware.
| Antivirus engine | Engine version | Detection |
| ByteHero |
1.0.0.1 |
Trojan.Win32.Heur.098 |
| Comodo Internet Security |
14510 |
Heur.Suspicious |
| Trend Micro HouseCall |
9.700.0.1001 |
TROJ_GEN.F47V1023 |
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| Memory |
| Private memory: | 3.32 MB | |
| Private (maximum): | 8.24 MB | |
| Private (minimum): | 4.81 MB | |
| Non-paged memory: | 3.32 MB | |
| Virtual memory: | 74.24 MB | |
| Virtual memory (peak): | 81.05 MB | |
| Working set: | 8.19 MB | |
| Working set (peak): | 8.25 MB | |
| Resource allocations |
| Threads: | 8 | |
| Handles: | 208 | |
| GUI GDI count: | 13 | |
| GUI GDI peak: | 16 | |
| GUI USER count: | 7 | |
| GUI USER peak: | 13 | |
Process properties
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Ultimate N |
53.85% |
|
| Windows 7 Professional |
23.08% |
|
| Windows 7 Ultimate |
15.38% |
|
| Windows 7 Home Premium |
7.69% |
|
Distribution by country
United States installs about 61.54% of Uninstall Helper.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Hewlett-Packard |
100.00% |
|
